身份验证Cookie到期

时间:2011-12-30 02:24:54

标签: c# asp.net-mvc cookies forms-authentication

我有两个运行网站的asp.net mvc(Server1和Server 2)。这些网站下的文件都是相同的。手动镜像。

问题:

在Server1上,创建asp.net身份验证票证后,cookie会在一段时间后自动过期。但是在其他服务器(Server2)上仍然存在cookie。

IIS 6.0上的ASP.NET MVC平台。它们位于同一台服务器上,但IP不同

Server1:http://www.seniseviyorum.com/WebForm1.aspx Server2:http://www.snsvyrm.com/WebForm1.aspx

有什么想法吗?

GET /WebForm1.aspx HTTP/1.1
Host: www.seniseviyorum.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Connection: keep-alive
Referer: http://www.seniseviyorum.com/WebForm1.aspx
Cookie: .SSAUTHSS=83E0F44BB68931FACD95B3F64FF2073738C629A0EEFE9D89657E8C457E54888584248D3CE0AF000C90C0E59A073D5BA4DC12C12F930EFF8CF9C712F413825A814ABE278702C0943D70C1771543487CC7E075990D8795B904194799D0E3E1349A6F6518350395A91F7E100C574D03CB136E4C9FAD52C8CE1F37F95AB0014A75B9E0F7C875910126E4B0A1C51F1058C08E; __utma=88980377.776610536.1325205796.1325205796.1325205796.1; __utmc=88980377; __utmz=88980377.1325205796.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Cache-Control: max-age=0

GET /WebForm1.aspx HTTP/1.1
Host: www.snsvyrm.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Connection: keep-alive
Referer: http://www.snsvyrm.com/WebForm1.aspx
Cookie: .SSAUTHSS=182C451AC2F9E07E25EBDC5CFDE50BDD04C39C045FD86A9868283198C3401AACAB8D52B026380109E162C82266D221FB52EFFA09B08D643086D3C9D7B3DC8D273B69F97A1C0899A5935492BCDCF2CA7723F8E9E470F3D9D72613787D3C2701B0F51CFCAB77BB7A729A2171739BD6A547BA95026CF3E9B2E5593024B57E80C8DF15760EB5CB5A459F547025F862C5C3FB; __utma=92513119.1344156904.1325205837.1325205837.1325208669.2; __utmc=92513119; __utmz=92513119.1325205837.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Cache-Control: max-age=0

1 个答案:

答案 0 :(得分:1)

使用cookie在服务器和浏览器之间来回发送身份验证令牌。由于每个网站使用不同的域,因此每个域都有自己的身份验证cookie。他们不会共享相同的cookie。因此,在没有向服务器发出http请求的情况下,其中一个在一定时间后过期是完全正常的。